CVE-2025-13155 | THREATINT

Description

An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges.

PUBLISHED Reserved 2025-11-13 | Published 2025-12-10 | Updated 2025-12-10 | Assigner lenovo

HIGH: 8.5CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-276: Incorrect Default Permissions

Product status

Default status

unaffected

Any version before 4.1.0

affected

Credits

Lenovo thanks Wanjie from Huazhong University of Science and Technology for reporting this issue. finder

References

iknow.lenovo.com.cn/detail/435005

cve.org (CVE-2025-13155)

nvd.nist.gov (CVE-2025-13155)

Download JSON